purview-dlp-integration
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- Microsoft Graph Content Processing: The skill's primary function is to send conversation text to the Microsoft Graph processContent endpoint. This is the legitimate and intended mechanism for organization-level data loss prevention and auditing.
- Automated Permission Configuration: The skill includes PowerShell scripts that modify Entra ID (Azure AD) service principal permissions. These scripts are used to grant the specific Graph API scopes (Content.Process.User or Content.Process.All) required for the Purview integration to function correctly.
- Administrative Policy Creation: One of the provided scripts automates the creation of Microsoft Purview DLP policies. This involves interacting with the Security & Compliance PowerShell module to establish data protection rules scoped to the AI agent.
Audit Metadata